Authentication

Ship secure sign-in in minutes.

Forte handles user verification, session management, MFA, passkeys, bot detection, and gives you a user management dashboard out of the box.

Set up sign-in. Let users get on with it.

Enable the methods you want — email, SMS, Google, or OAuth. Forte keeps the verification, sessions, and security work in one place.

Enable sign-in methods from the Forte dashboard

An authentication walkthrough: enable email, SMS, and Google sign-in one by one, then a sign-in card appears as the user count climbs to 1,204.
Email & password
SMS one-time codes
Sign in with Google

Give users a sign-in method that fits

Passwords

Per-project strength policies, self-service reset, and rate-limited sign-in.

One-time codes

Passwordless sign-in over email or SMS. Nothing for users to remember.

Google

One-tap OAuth sign-in. New users are verified from the first session.

Hardened by default

Every method is throttled and resists account enumeration — no configuration.

Multi-factor authentication

Turn on MFA per project — optional for users who want it, or required on every sign-in. Users enroll and manage their own factors; you can reset MFA for a locked-out user from the console.

Verify it's you
Choose a second factor to continue
Use a passkey
Enter authenticator code
Email a code to m•••@example.com
Use a backup code
Off

Sign-in works as before.

Optional

Users who enroll get challenged.

Required

Every sign-in needs a second factor.

Read the docs on configuring MFA for a project

Give users control when something changes

Sessions, recovery, and security history are part of the account experience instead of a separate project.

  • Forte provides APIs for users to list active sessions, sign out one device, or sign out everywhere.
  • Login history with source IPs helps users review where they have signed in.
  • Built-in audit trails record user actions.
  • Administrate users, sessions, and MFA from the Forte console.
Active sessions
Chrome · macOSThis device
203.0.113.7 · active now
iPhone
198.51.100.24 · 2h ago
Sign out
Firefox · Windows
192.0.2.115 · 3d ago
Sign out
Sign out everywhere
Read the docs about Give users control when something changes

Verify every way you reach a user

More than one way to reach a user

Multiple emails and phone numbers per user, each individually verified.

Your name on every message

Verification emails and texts sent from your own branded sender.

Fixed test codes

Designate test numbers and addresses with a known code — no real messages, so staging and CI just work.

+1 (555) 013-3799 → 000000

Identifiers stay protected

A verified email or number belongs to its user; abandoned half-signups can't hold one hostage.

Screen sign-ins before they become a problem

Forte checks sign-ins for automated and abusive traffic by default, with nothing to configure.

  • Automated bot and abuse detection on sign-in.
  • Enabled by default — nothing to configure.
Read the docs about Screen sign-ins before they become a problem

Ship production-ready products faster with Forte.

Connect your repo and launch, operate, debug, scale, and monetize from one platform.